Key facts

  • Start with the free readiness gap checklist.
  • Scoped to what a Stage 1/Stage 2 auditor will actually ask for.
  • Works alongside existing ISO 27001 or other management systems where you have them.
  • Founder-led, proportionate to your size and AI footprint — not a one-size-fits-all package.
  • Get in touch to discuss your gap assessment and certification timeline.

The problem

Many businesses want ISO 42001 certification but do not know what an auditor actually expects, and end up either over-building documentation nobody uses, or under-preparing and failing Stage 1. A structured readiness process avoids both.

What the service includes

A gap assessment against the Annex A controls, help drafting the AI policy, Statement of Applicability and supporting evidence, and preparation coaching ahead of your chosen certification body's Stage 1 and Stage 2 audits. See the certification process for how the stages work.

How it works

1. Gap assessment. Score your current state against Annex A using the free checklist as a starting point.

2. Build. Draft the missing policy, roles, risk process and documentation.

3. Audit prep. Get ready for Stage 1 and Stage 2 with the certification body of your choice.

4. Ongoing. Support maintaining the AIMS between annual surveillance audits.

Why work with AI Act Ready

Practical, proportionate support scoped to your actual AI footprint, from the same team that built the free readiness checklist. Get in touch to discuss your certification timeline.

Frequently asked questions

How long does ISO 42001 certification take?

Typically six to twelve months, depending on AI maturity, scope and existing management systems.

How much does ISO 42001 certification cost?

Varies by size and scope: certification body audit fees plus internal or consulting effort — SMEs are often in the low-to-mid five figures (GBP) all-in.

Is ISO 42001 worth it for an SME?

Often yes when AI is core to your product or customers demand assurance — it shortens procurement and signals trust.

Can we self-certify ISO 42001?

No — certification requires an accredited third-party audit, but you can and should self-assess readiness first.

How does AI Act Ready help?

Practical, founder-led assessment and remediation — clear classification, buyer-ready evidence and proportionate governance, without consultant padding.

Related pages

Sources

Last updated 19 June 2026.